@toa.io/extensions.exposition 1.0.0-alpha.31 → 1.0.0-alpha.310

package/transpiled/MCP/Server.js

@@ -0,0 +1,191 @@
+import { console } from 'openspan';
+import { BRANCH_TTL } from '@toa.io/definitions/extensions.exposition';
+import * as http from '../HTTP/index.js';
+import { discovery } from './discover.js';
+import { call, list } from './tools.js';
+import { HEADER_MISMATCH, INVALID_PARAMS, INVALID_REQUEST, METHOD_NOT_FOUND, PARSE, UNSUPPORTED_VERSION, failure, response } from './errors.js';
+import { CLIENT_CAPABILITIES, JSONRPC, LEGACY, MODERN, PROTOCOL_VERSION, SERVER_INFO, VERSIONS } from './types.js';
+/**
+ * The Model Context Protocol, as one endpoint that remembers nothing between requests.
+ *
+ * Two revisions are answered from it. The modern one carries the version and the client's
+ * capabilities in every request; the one before it opens with `initialize`, which is what
+ * most clients still send. Neither needs a session, and neither needs a stream: every method
+ * here answers one object, which is why this can exist in a package that serves no SSE.
+ */
+export class Server {
+    options;
+    tree;
+    discovery;
+    origins;
+    constructor(options, tree) {
+        this.options = options;
+        this.tree = tree;
+        this.discovery = discovery(options);
+        this.origins = new Set(options.origins ?? []);
+    }
+    async process(context, route) {
+        if (context.request.method !== 'POST')
+            throw new http.MethodNotAllowed(new Headers({ allow: 'POST' }));
+        this.admit(context);
+        const message = await this.read(context);
+        const version = this.version(context, message);
+        const modern = version === MODERN;
+        if (modern)
+            this.mirrored(context, message);
+        const result = await this.answer({ context, route, tree: this.tree }, message, modern);
+        // a notification is answered by not answering, and there is nothing here to remember
+        if (message.id === undefined)
+            return { status: ACCEPTED };
+        return {
+            status: OK,
+            body: { jsonrpc: JSONRPC, id: message.id, result },
+            headers: new Headers({ 'cache-control': 'no-store' })
+        };
+    }
+    /** Who may reach the endpoint at all, before anything it carries is read. */
+    admit(context) {
+        const origin = context.request.headers.origin;
+        // the revision requires this against DNS rebinding; a request without one is no browser's
+        if (origin !== undefined && !this.origins.has(origin))
+            throw new http.Forbidden('Origin is not allowed');
+        if (this.options.anonymous === true)
+            return;
+        if (context.identity == null)
+            throw new http.Unauthorized();
+    }
+    async answer(scope, message, modern) {
+        const params = message.params ?? {};
+        switch (message.method) {
+            case 'server/discover':
+                return this.complete(this.discovery.modern, modern, DISCOVERY_CACHE);
+            case 'tools/list':
+                return this.complete({ tools: await list(this.tree, scope.context) }, modern, TOOLS_CACHE);
+            case 'tools/call':
+                return this.complete(await this.tool(scope, params), modern);
+            // what a client of an earlier revision opens with; no session is made and none is named
+            case 'initialize':
+                return this.discovery.legacy(declared(params));
+            case 'notifications/initialized':
+                return null;
+            case 'ping':
+                return {};
+            default:
+                throw new http.NotFound(response(message.id ?? null, failure(METHOD_NOT_FOUND, `'${message.method}' is not a method this server answers`)));
+        }
+    }
+    async tool(scope, params) {
+        const named = params.name;
+        if (typeof named !== 'string')
+            throw new http.BadRequest(response(null, failure(INVALID_PARAMS, '`tools/call` states the tool it calls by name')));
+        const args = params.arguments ?? {};
+        if (typeof args !== 'object' || args === null || Array.isArray(args))
+            throw new http.BadRequest(response(null, failure(INVALID_PARAMS, '`arguments` must be an object')));
+        return await console.span({ name: named }, async () => await call(scope, named, args));
+    }
+    /**
+     * Every result of the modern revision says what kind it is, and who answered it. Where the
+     * revision names the operation as one whose result may be held, it says that too, and must.
+     */
+    complete(result, modern, cache) {
+        return modern
+            ? {
+                ...result,
+                ...cache,
+                resultType: 'complete',
+                _meta: { [SERVER_INFO]: this.serverInfo() }
+            }
+            : result;
+    }
+    serverInfo() {
+        return this.discovery.modern._meta[SERVER_INFO];
+    }
+    /**
+     * Which revision this request is of. `initialize` is one by itself; otherwise the header
+     * says, and a request that names none is of a revision that did not send one.
+     */
+    version(context, message) {
+        if (message.method === 'initialize')
+            return LEGACY;
+        const header = context.request.headers['mcp-protocol-version'];
+        const stated = declared(message.params ?? {});
+        if (header !== undefined && stated !== undefined && header !== stated)
+            throw new http.BadRequest(response(message.id ?? null, failure(HEADER_MISMATCH, `'MCP-Protocol-Version' says '${String(header)}' and the body says '${stated}'`)));
+        const value = header ?? stated;
+        if (value === undefined)
+            return LEGACY;
+        if (!VERSIONS.includes(value))
+            throw new http.BadRequest(response(message.id ?? null, failure(UNSUPPORTED_VERSION, 'Unsupported protocol version', {
+                supported: VERSIONS,
+                requested: value
+            })));
+        return value;
+    }
+    /**
+     * What the modern revision mirrors into headers, so that what routes a request and what
+     * answers it cannot be told two different things.
+     */
+    mirrored(context, message) {
+        const meta = metadata(message.params ?? {});
+        if (meta?.[PROTOCOL_VERSION] === undefined || meta[CLIENT_CAPABILITIES] === undefined)
+            throw new http.BadRequest(response(message.id ?? null, failure(INVALID_PARAMS, `'_meta' states '${PROTOCOL_VERSION}' and '${CLIENT_CAPABILITIES}'`)));
+        const id = message.id ?? null;
+        mirrors(context, { id, header: 'mcp-method', value: message.method });
+        if (message.method === 'tools/call')
+            mirrors(context, { id, header: 'mcp-name', value: (message.params ?? {}).name });
+    }
+    /** A body the decoder refuses is a parse error; a media type it does not know is not. */
+    async read(context) {
+        let body;
+        try {
+            body = await context.body();
+        }
+        catch (exception) {
+            if (exception instanceof http.BadRequest)
+                throw new http.BadRequest(response(null, failure(PARSE, 'Parse error')));
+            throw exception;
+        }
+        if (typeof body !== 'object' ||
+            body === null ||
+            Array.isArray(body) ||
+            body.jsonrpc !== JSONRPC ||
+            typeof body.method !== 'string')
+            throw new http.BadRequest(response(null, failure(INVALID_REQUEST, 'A request carries one JSON-RPC message')));
+        return body;
+    }
+}
+/** What a header says must be what the body says, or what routes and what answers differ. */
+function mirrors(context, mirror) {
+    const { id, header, value } = mirror;
+    const stated = context.request.headers[header];
+    if (stated === undefined)
+        throw new http.BadRequest(response(id, failure(HEADER_MISMATCH, `'${header}' is required`)));
+    if (decode(String(stated)) !== value)
+        throw new http.BadRequest(response(id, failure(HEADER_MISMATCH, `'${header}' says '${String(stated)}' and the body says '${String(value)}'`)));
+}
+function metadata(params) {
+    const meta = params._meta;
+    return typeof meta === 'object' && meta !== null
+        ? meta
+        : undefined;
+}
+function declared(params) {
+    const stated = metadata(params)?.[PROTOCOL_VERSION];
+    return typeof stated === 'string' ? stated : undefined;
+}
+/** What a header value that could not be written as ASCII was encoded as. */
+function decode(value) {
+    if (!value.startsWith(SENTINEL) || !value.endsWith(TERMINATOR))
+        return value;
+    const encoded = value.slice(SENTINEL.length, -TERMINATOR.length);
+    return Buffer.from(encoded, 'base64').toString('utf8');
+}
+/** A tool list is what the tree holds, which stands until a branch of it expires. */
+const TOOLS_CACHE = { ttlMs: BRANCH_TTL, cacheScope: 'private' };
+/** What the annotation says, which is the same for every caller until the application is redeployed. */
+const DISCOVERY_CACHE = { ttlMs: BRANCH_TTL, cacheScope: 'public' };
+const OK = 200;
+const ACCEPTED = 202;
+const SENTINEL = '=?base64?';
+const TERMINATOR = '?=';
+//# sourceMappingURL=Server.js.map

package/transpiled/MCP/Server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.js","sourceRoot":"","sources":["../../source/MCP/Server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAA;AACtE,OAAO,KAAK,IAAI,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,SAAS,EAAkB,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAc,MAAM,YAAY,CAAA;AACnD,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,KAAK,EACL,mBAAmB,EACnB,OAAO,EACP,QAAQ,EACT,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,MAAM,EACN,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,QAAQ,EAIT,MAAM,YAAY,CAAA;AAInB;;;;;;;GAOG;AACH,MAAM,OAAO,MAAM;IACA,OAAO,CAAK;IACZ,IAAI,CAAM;IACV,SAAS,CAAW;IACpB,OAAO,CAAa;IAErC,YAAmB,OAAY,EAAE,IAAU;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,OAAqB,EACrB,KAAqB;QAErB,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YACnC,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QAEjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,MAAM,CAAA;QAEjC,IAAI,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAEtF,qFAAqF;QACrF,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QAEzD,OAAO;YACL,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE;YAClD,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;SACtD,CAAA;IACH,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,OAAqB;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE7C,0FAA0F;QAC1F,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACnD,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAA;QAEnD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI;YAAE,OAAM;QAE3C,IAAK,OAAkC,CAAC,QAAQ,IAAI,IAAI;YACtD,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;IACjC,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAY,EACZ,OAAgB,EAChB,MAAe;QAEf,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;QAEnC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;YAEtE,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,QAAQ,CAClB,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAC/C,MAAM,EACN,WAAW,CACZ,CAAA;YAEH,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;YAE9D,wFAAwF;YACxF,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAEhD,KAAK,2BAA2B;gBAC9B,OAAO,IAAI,CAAA;YAEb,KAAK,MAAM;gBACT,OAAO,EAAE,CAAA;YAEX;gBACE,MAAM,IAAI,IAAI,CAAC,QAAQ,CACrB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CACL,gBAAgB,EAChB,IAAI,OAAO,CAAC,MAAM,uCAAuC,CAC1D,CACF,CACF,CAAA;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,KAAY,EAAE,MAAc;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAA;QAEzB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,IAAI,EACJ,OAAO,CAAC,cAAc,EAAE,+CAA+C,CAAC,CACzE,CACF,CAAA;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;QAEnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAClE,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC,CACzE,CAAA;QAEH,OAAO,MAAM,OAAO,CAAC,IAAI,CACvB,EAAE,IAAI,EAAE,KAAK,EAAE,EACf,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAc,CAAC,CACrD,CAAA;IACH,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,MAAc,EAAE,MAAe,EAAE,KAAa;QAC7D,OAAO,MAAM;YACX,CAAC,CAAC;gBACE,GAAG,MAAM;gBACT,GAAG,KAAK;gBACR,UAAU,EAAE,UAAU;gBACtB,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE;aAC5C;YACH,CAAC,CAAC,MAAM,CAAA;IACZ,CAAC;IAEO,UAAU;QAChB,OAAQ,IAAI,CAAC,SAAS,CAAC,MAA6C,CAAC,KAAK,CACxE,WAAW,CACZ,CAAA;IACH,CAAC;IAED;;;OAGG;IACK,OAAO,CAAC,OAAqB,EAAE,OAAgB;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,MAAM,CAAA;QAElD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAE7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM;YACnE,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CACL,eAAe,EACf,gCAAgC,MAAM,CAAC,MAAM,CAAC,wBAAwB,MAAM,GAAG,CAChF,CACF,CACF,CAAA;QAEH,MAAM,KAAK,GAAI,MAA6B,IAAI,MAAM,CAAA;QAEtD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAEtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3B,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CAAC,mBAAmB,EAAE,8BAA8B,EAAE;gBAC3D,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,KAAK;aACjB,CAAC,CACH,CACF,CAAA;QAEH,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,OAAqB,EAAE,OAAgB;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAE3C,IAAI,IAAI,EAAE,CAAC,gBAAgB,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAK,SAAS;YACnF,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CACL,cAAc,EACd,mBAAmB,gBAAgB,UAAU,mBAAmB,GAAG,CACpE,CACF,CACF,CAAA;QAEH,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAA;QAE7B,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAErE,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY;YACjC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,IAAI,CAAC,OAAqB;QACtC,IAAI,IAAa,CAAA;QAEjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,SAAS,YAAY,IAAI,CAAC,UAAU;gBACtC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;YAE1E,MAAM,SAAS,CAAA;QACjB,CAAC;QAED,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAClB,IAAgB,CAAC,OAAO,KAAK,OAAO;YACrC,OAAQ,IAAgB,CAAC,MAAM,KAAK,QAAQ;YAE5C,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC,CACnF,CAAA;QAEH,OAAO,IAAe,CAAA;IACxB,CAAC;CACF;AAED,6FAA6F;AAC7F,SAAS,OAAO,CAAC,OAAqB,EAAE,MAAc;IACpD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAE9C,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,MAAM,eAAe,CAAC,CAAC,CAClE,CAAA;IAEH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK;QAClC,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,EAAE,EACF,OAAO,CACL,eAAe,EACf,IAAI,MAAM,WAAW,MAAM,CAAC,MAAM,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,GAAG,CAC5E,CACF,CACF,CAAA;AACL,CAAC;AAQD,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAA;IAEzB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAC9C,CAAC,CAAE,IAAgC;QACnC,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAA;IAEnD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACxD,CAAC;AAED,6EAA6E;AAC7E,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAE5E,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxD,CAAC;AAED,qFAAqF;AACrF,MAAM,WAAW,GAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;AAEvE,wGAAwG;AACxG,MAAM,eAAe,GAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AAE1E,MAAM,EAAE,GAAG,GAAG,CAAA;AACd,MAAM,QAAQ,GAAG,GAAG,CAAA;AACpB,MAAM,QAAQ,GAAG,WAAW,CAAA;AAC5B,MAAM,UAAU,GAAG,IAAI,CAAA"}

package/transpiled/MCP/discover.d.ts

@@ -0,0 +1,13 @@
+import type { MCPAnnotation as MCP } from '@toa.io/definitions/extensions.exposition';
+/**
+ * What a client is told before it calls anything: the revisions served, what is served, and
+ * who serves it. It is a function of the annotation alone, so it is built once and answered
+ * as it is.
+ */
+export interface Discovery {
+    /** `server/discover`, which the modern revision has replaced the handshake with. */
+    modern: object;
+    /** `initialize`, in the shape a client of an earlier revision reads. */
+    legacy: (offered: string | undefined) => object;
+}
+export declare function discovery(options: MCP): Discovery;

package/transpiled/MCP/discover.js

@@ -0,0 +1,29 @@
+import { readFileSync } from 'node:fs';
+import { LEGACY, MODERN, SERVER_INFO, VERSIONS } from './types.js';
+export function discovery(options) {
+    const info = { name: options.name, version: VERSION };
+    // `listChanged` is a stream a client holds open, and this endpoint holds none
+    const capabilities = { tools: {} };
+    const modern = {
+        supportedVersions: VERSIONS,
+        capabilities,
+        _meta: { [SERVER_INFO]: info }
+    };
+    if (options.instructions !== undefined)
+        modern.instructions = options.instructions;
+    function legacy(offered) {
+        const value = {
+            // what the client asked for where that is served, and the newest handshake otherwise
+            protocolVersion: offered !== undefined && offered !== MODERN ? offered : LEGACY,
+            capabilities,
+            serverInfo: info
+        };
+        if (options.instructions !== undefined)
+            value.instructions = options.instructions;
+        return value;
+    }
+    return { modern, legacy };
+}
+/** What this gateway is, which is what answers however an application names itself. */
+const VERSION = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version;
+//# sourceMappingURL=discover.js.map

package/transpiled/MCP/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../source/MCP/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAgBlE,MAAM,UAAU,SAAS,CAAC,OAAY;IACpC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAErD,8EAA8E;IAC9E,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IAElC,MAAM,MAAM,GAA4B;QACtC,iBAAiB,EAAE,QAAQ;QAC3B,YAAY;QACZ,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE;KAC/B,CAAA;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;IAElF,SAAS,MAAM,CAAC,OAA2B;QACzC,MAAM,KAAK,GAA4B;YACrC,qFAAqF;YACrF,eAAe,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC/E,YAAY;YACZ,UAAU,EAAE,IAAI;SACjB,CAAA;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;QAEjF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,GAAW,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACrE,CAAC,OAAO,CAAA"}

package/transpiled/MCP/errors.d.ts

@@ -0,0 +1,24 @@
+import * as http from '../HTTP/index.ts';
+import { type Failure, type Response } from './types.ts';
+export declare const PARSE = -32700;
+export declare const INVALID_REQUEST = -32600;
+export declare const METHOD_NOT_FOUND = -32601;
+export declare const INVALID_PARAMS = -32602;
+export declare const INTERNAL = -32603;
+export declare const HEADER_MISMATCH = -32020;
+export declare const MISSING_CAPABILITY = -32021;
+export declare const UNSUPPORTED_VERSION = -32022;
+export declare function failure(code: number, message: string, data?: unknown): Failure;
+export declare function response(id: string | number | null, error: Failure): Response;
+/**
+ * What an exception says as a JSON-RPC error.
+ *
+ * The readable text is `body`, never `message`: `http.Exception` calls `super()` with no
+ * argument, so every one of them carries an empty `message`.
+ */
+export declare function of(exception: unknown): Failure;
+/**
+ * What the call was refused with, which a model reads and may correct itself by: what the
+ * operation said, where it said anything, and otherwise what the status means here.
+ */
+export declare function refusal(exception: http.ClientError): string;

package/transpiled/MCP/errors.js

@@ -0,0 +1,67 @@
+import * as http from '../HTTP/index.js';
+import { JSONRPC } from './types.js';
+/* The five JSON-RPC 2.0 fixes, which mean the same to every client. */
+export const PARSE = -32700;
+export const INVALID_REQUEST = -32600;
+export const METHOD_NOT_FOUND = -32601;
+export const INVALID_PARAMS = -32602;
+export const INTERNAL = -32603;
+/*
+ * MCP's own. It reserves -32020 to -32099 for the specification and tells an implementation
+ * to use nothing of -32000 to -32019 at all — which is where this gateway's JSON-RPC codes
+ * sit, so none of them is answered here.
+ */
+export const HEADER_MISMATCH = -32020;
+export const MISSING_CAPABILITY = -32021;
+export const UNSUPPORTED_VERSION = -32022;
+export function failure(code, message, data) {
+    const value = { code, message };
+    if (data !== undefined)
+        value.data = data;
+    return value;
+}
+export function response(id, error) {
+    return { jsonrpc: JSONRPC, id, error };
+}
+/**
+ * What an exception says as a JSON-RPC error.
+ *
+ * The readable text is `body`, never `message`: `http.Exception` calls `super()` with no
+ * argument, so every one of them carries an empty `message`.
+ */
+export function of(exception) {
+    if (exception instanceof http.NotFound || exception instanceof http.MethodNotAllowed)
+        return failure(METHOD_NOT_FOUND, text(exception, 'Method not found'));
+    if (exception instanceof http.BadRequest)
+        return failure(INVALID_PARAMS, text(exception, 'Invalid params'));
+    return failure(INTERNAL, 'Internal error');
+}
+/**
+ * What the call was refused with, which a model reads and may correct itself by: what the
+ * operation said, where it said anything, and otherwise what the status means here.
+ */
+export function refusal(exception) {
+    const body = exception.body;
+    if (typeof body !== 'object' || body === null || typeof body.code !== 'string')
+        return text(exception, REFUSALS[exception.status] ?? 'Refused');
+    const message = body.message;
+    return typeof message === 'string' && message !== '' ? message : body.code;
+}
+/**
+ * A refusal a model can act on, where the reply carried no words of its own. `auth` does
+ * not say which of its directives refused, and `auth:id` is what most of them are: a call
+ * naming a record that is not the caller's is the likeliest thing to have gone wrong.
+ */
+const REFUSALS = {
+    400: 'The arguments were refused',
+    403: "Not authorized. If an argument names an identity or a record, it may not be the caller's own",
+    404: 'There is nothing at that address',
+    409: 'The record changed while the call was made',
+    429: 'Too many calls'
+};
+function text(exception, fallback) {
+    return typeof exception.body === 'string' && exception.body !== ''
+        ? exception.body
+        : fallback;
+}
+//# sourceMappingURL=errors.js.map

package/transpiled/MCP/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../source/MCP/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,OAAO,EAA+B,MAAM,YAAY,CAAA;AAEjE,uEAAuE;AACvE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAA;AAC3B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAA;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAA;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAA;AACpC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAA;AAE9B;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAA;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAA;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAA;AAEzC,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAe,EAAE,IAAc;IACnE,MAAM,KAAK,GAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAExC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAA;IAEzC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAA0B,EAAE,KAAc;IACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,EAAE,CAAC,SAAkB;IACnC,IAAI,SAAS,YAAY,IAAI,CAAC,QAAQ,IAAI,SAAS,YAAY,IAAI,CAAC,gBAAgB;QAClF,OAAO,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAEvE,IAAI,SAAS,YAAY,IAAI,CAAC,UAAU;QACtC,OAAO,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAEnE,OAAO,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,SAA2B;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAA;IAE3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC5E,OAAO,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAA;IAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAkB,CAAA;IAEvC,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,IAAe,CAAA;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,QAAQ,GAA2B;IACvC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,8FAA8F;IACnG,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,4CAA4C;IACjD,GAAG,EAAE,gBAAgB;CACtB,CAAA;AAED,SAAS,IAAI,CAAC,SAAyB,EAAE,QAAgB;IACvD,OAAO,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,EAAE;QAChE,CAAC,CAAC,SAAS,CAAC,IAAI;QAChB,CAAC,CAAC,QAAQ,CAAA;AACd,CAAC"}

package/transpiled/MCP/index.d.ts

@@ -0,0 +1 @@
+export { Server } from './Server.ts';

package/transpiled/MCP/index.js

@@ -0,0 +1,2 @@
+export { Server } from './Server.js';
+//# sourceMappingURL=index.js.map

package/transpiled/MCP/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/MCP/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA"}

package/transpiled/MCP/schema.d.ts

@@ -0,0 +1,22 @@
+import type { Introspection, Schema } from '../Introspection.ts';
+import type { Annotations } from './types.ts';
+/**
+ * What a tool takes, which is what the procedure takes: a route variable by the name the
+ * template gives it, the querystring under a name of its own, and what is left is the body.
+ *
+ * A `map:headers` property is not here: a call carries no headers of its own, so there is
+ * nowhere for a model to put one.
+ */
+export declare function input(introspection: Introspection, variables: string[], selection: Record<string, Schema> | null): object;
+/**
+ * What a tool answers with, where that is worth stating. An operation's `output` is optional
+ * and normalizes to `{}`, which describes nothing — and a schema the revision would have the
+ * reply validated against is worse said emptily than left unsaid.
+ */
+export declare function output(introspection: Introspection): object | undefined;
+/**
+ * What the call is, which the revision has a client treat as a hint — and a client that reads
+ * `readOnlyHint` may call a tool without asking, so a route that says it writes is believed over
+ * the verb it is served under.
+ */
+export declare function annotations(verb: string, introspection: Introspection): Annotations | undefined;

package/transpiled/MCP/schema.js

@@ -0,0 +1,74 @@
+/**
+ * What a tool takes, which is what the procedure takes: a route variable by the name the
+ * template gives it, the querystring under a name of its own, and what is left is the body.
+ *
+ * A `map:headers` property is not here: a call carries no headers of its own, so there is
+ * nowhere for a model to put one.
+ */
+// eslint-disable-next-line max-params
+export function input(introspection, variables, selection) {
+    const properties = {};
+    const required = [];
+    /*
+     * By the name the template gives it, which is what the tool's own name states and what
+     * resolving it consumes. A `map:segments` renaming is the gateway's, as invisible here as
+     * it is to whoever writes the path; and a variable the operation does not declare has no
+     * schema of its own, being a segment.
+     */
+    for (const variable of variables) {
+        properties[variable] = introspection.route?.[variable] ?? { type: 'string' };
+        required.push(variable);
+    }
+    /*
+     * It is a querystring on the wire, which is nothing a model knows or needs to; what it is
+     * to a caller is the part of a call that picks what the call is about. What selects
+     * records is `selection` on the method, and is merged here because here it is something
+     * the caller sends.
+     */
+    const query = { ...introspection.query, ...selection };
+    if (Object.keys(query).length > 0)
+        properties.query = {
+            type: 'object',
+            description: 'Which records the call works on: what to match, in what order, ' +
+                'and how many at once.',
+            properties: query
+        };
+    const body = introspection.input;
+    if (body?.properties !== undefined) {
+        Object.assign(properties, body.properties);
+        required.push(...(body.required ?? []));
+    }
+    const schema = { type: 'object', properties };
+    if (required.length > 0)
+        schema.required = required;
+    // what a name does not state is not a parameter, and a model should not invent one
+    schema.additionalProperties = false;
+    return schema;
+}
+/**
+ * What a tool answers with, where that is worth stating. An operation's `output` is optional
+ * and normalizes to `{}`, which describes nothing — and a schema the revision would have the
+ * reply validated against is worse said emptily than left unsaid.
+ */
+export function output(introspection) {
+    const schema = introspection.output;
+    if (schema === undefined || schema === null)
+        return undefined;
+    return Object.keys(schema).length === 0 ? undefined : schema;
+}
+/**
+ * What the call is, which the revision has a client treat as a hint — and a client that reads
+ * `readOnlyHint` may call a tool without asking, so a route that says it writes is believed over
+ * the verb it is served under.
+ */
+export function annotations(verb, introspection) {
+    const value = {};
+    if (introspection.readonly ?? (verb === 'GET' || verb === 'HEAD'))
+        value.readOnlyHint = true;
+    if (verb === 'DELETE')
+        value.destructiveHint = true;
+    if (verb === 'PUT' || verb === 'DELETE')
+        value.idempotentHint = true;
+    return Object.keys(value).length === 0 ? undefined : value;
+}
+//# sourceMappingURL=schema.js.map

package/transpiled/MCP/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../source/MCP/schema.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,sCAAsC;AACtC,MAAM,UAAU,KAAK,CACnB,aAA4B,EAC5B,SAAmB,EACnB,SAAwC;IAExC,MAAM,UAAU,GAA4B,EAAE,CAAA;IAC9C,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B;;;;;OAKG;IACH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QAC5E,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAED;;;;;OAKG;IACH,MAAM,KAAK,GAAG,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,SAAS,EAAE,CAAA;IAEtD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAC/B,UAAU,CAAC,KAAK,GAAG;YACjB,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iEAAiE;gBACjE,uBAAuB;YACzB,UAAU,EAAE,KAAK;SAClB,CAAA;IAEH,MAAM,IAAI,GAAG,aAAa,CAAC,KAAiC,CAAA;IAE5D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAA;IACzC,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;IAEtE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAEnD,mFAAmF;IACnF,MAAM,CAAC,oBAAoB,GAAG,KAAK,CAAA;IAEnC,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,aAA4B;IACjD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAkC,CAAA;IAE/D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAE7D,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,MAAiB,CAAA;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,aAA4B;IAE5B,MAAM,KAAK,GAAgB,EAAE,CAAA;IAE7B,IAAI,aAAa,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;QAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAA;IAE5F,IAAI,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,eAAe,GAAG,IAAI,CAAA;IAEnD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAA;IAEpE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC"}

package/transpiled/MCP/tools.d.ts

@@ -0,0 +1,31 @@
+import * as http from '../HTTP/index.ts';
+import type { Tree } from '../RTD/index.ts';
+import type { Params, Result, Tool } from './types.ts';
+/**
+ * Every method this caller may reach that is published as a tool, named as the procedure
+ * it is.
+ *
+ * A method is a tool where it says so with `mcp:tool`, and a default denies: a tree holds
+ * what an application serves, and most of it is machinery a model has no business reading.
+ * What a caller may then do with one is what `auth` says. The tree is walked once and each
+ * method describes itself, which is where that is decided and where `io` and `map` say what
+ * may be sent.
+ *
+ * Sorted, because the revision asks for an order a client can cache on.
+ */
+export declare function list(tree: Tree, request: http.Context): Promise<Tool[]>;
+/**
+ * The call the tool is. Its arguments are the procedure's parameters, taken apart the way a
+ * request carries them, and what answers is the same `route` an ordinary request goes to.
+ *
+ * A name that is not a published tool is answered as no tool at all, whether or not a route
+ * would have taken it: what an application did not publish is not reachable here by guessing
+ * its name. What the caller may then do with one that is published is still `auth`'s to say.
+ */
+export declare function call(scope: Scope, named: string, args: Params): Promise<Result>;
+/** Everything a call needs that is not the call: the request it is of, and what answers it. */
+export interface Scope {
+    context: http.Context;
+    route: http.Processor;
+    tree: Tree;
+}

package/transpiled/MCP/tools.js

@@ -0,0 +1,144 @@
+import * as http from '../HTTP/index.js';
+import { fork } from '../RPC/Context.js';
+import { address, name, split } from '../RPC/names.js';
+import { METHOD_NOT_FOUND, failure, refusal, response } from './errors.js';
+import { annotations, input, output } from './schema.js';
+import { FAMILY, MCP } from '../directives/mcp/index.js';
+import { describing } from '../Introspection.js';
+import { variables } from '../RTD/segment.js';
+/**
+ * Every method this caller may reach that is published as a tool, named as the procedure
+ * it is.
+ *
+ * A method is a tool where it says so with `mcp:tool`, and a default denies: a tree holds
+ * what an application serves, and most of it is machinery a model has no business reading.
+ * What a caller may then do with one is what `auth` says. The tree is walked once and each
+ * method describes itself, which is where that is decided and where `io` and `map` say what
+ * may be sent.
+ *
+ * Sorted, because the revision asks for an order a client can cache on.
+ */
+export async function list(tree, request) {
+    /*
+     * A description, not the request asking. What refuses a credentialed request at an
+     * `anonymous` route does not refuse the call a tool makes, and a list that says otherwise
+     * disagrees with what `tools/call` then does.
+     */
+    const context = describing(request);
+    const tools = [];
+    for (const { node, method, tool } of await published(tree)) {
+        // a branch that has expired is not walked, and what it published is not served either
+        if (Date.now() >= node.expiration)
+            continue;
+        if (await method.directives.admits(context))
+            tools.push(tool);
+    }
+    return tools;
+}
+/**
+ * What the tree publishes, in the order a client reads it, whoever is asking: what a tool is
+ * said to be is the route's and not the caller's, and the only thing a caller decides is
+ * whether it is told of one at all.
+ *
+ * Built once per tree — a merged branch drops it — so a `tools/list` describes the tree once
+ * and then answers from what it described.
+ */
+async function published(tree) {
+    return await tree.derived(TOOLS, async () => {
+        const tools = [];
+        for (const { segments, verb, method, node } of tree.walk()) {
+            if (!MCP.published(method.directives.declared(FAMILY)))
+                continue;
+            const named = name(segments, verb);
+            // a route a name cannot spell is a route nothing addresses, here or at `/.rpc`
+            if (named === null)
+                continue;
+            const params = variables(segments);
+            const introspection = await method.describe(params);
+            // a method hidden is hidden from every answer, this one included
+            if (introspection === null)
+                continue;
+            const described = introspection.description;
+            const schema = output(introspection);
+            const hints = annotations(verb, introspection);
+            // in the order the revision documents one, which is the order it is read in
+            const tool = {
+                name: named,
+                ...(introspection.title === undefined ? {} : { title: introspection.title }),
+                ...(described === undefined ? {} : { description: described }),
+                inputSchema: input(introspection, params.map((param) => param.name), method.endpoint?.selection() ?? null),
+                ...(schema === undefined ? {} : { outputSchema: schema }),
+                ...(hints === undefined ? {} : { annotations: hints })
+            };
+            tools.push({ node, method, tool });
+        }
+        // sorted, because the revision asks for an order a client can cache on
+        return tools.sort((one, other) => (one.tool.name < other.tool.name ? -1 : 1));
+    });
+}
+/**
+ * The call the tool is. Its arguments are the procedure's parameters, taken apart the way a
+ * request carries them, and what answers is the same `route` an ordinary request goes to.
+ *
+ * A name that is not a published tool is answered as no tool at all, whether or not a route
+ * would have taken it: what an application did not publish is not reachable here by guessing
+ * its name. What the caller may then do with one that is published is still `auth`'s to say.
+ */
+export async function call(scope, named, args) {
+    if (!serves(scope.tree, named))
+        throw new http.NotFound(response(null, failure(METHOD_NOT_FOUND, `'${named}' is not a tool this server publishes`)));
+    const { path, verb, variables } = address(named, args);
+    const { query, input: body } = split(args, variables);
+    const clone = fork(scope.context, path, verb, query, body);
+    try {
+        const message = await scope.route(clone);
+        // what `io:output` restricts, over this call's reply rather than the envelope
+        await http.shape(clone, message);
+        return result(message.body);
+    }
+    catch (exception) {
+        /*
+         * What the route made of this call is a value a model reads and may correct itself by:
+         * an operation that refused, an argument `io:input` would not take, a record that is
+         * not there, an identity `auth` would not let it act on. A credential is none of those
+         * — that is the client's to fix and not the model's, so it is answered as it is — and
+         * neither is a fault of this server, which is a protocol error and stays one.
+         */
+        if (exception instanceof http.ClientError &&
+            !(exception instanceof http.Unauthorized))
+            return { content: [{ type: 'text', text: refusal(exception) }], isError: true };
+        throw exception;
+    }
+}
+/**
+ * Whether the tree publishes this name as a tool. What `auth` makes of the caller is not
+ * asked here — the declaration is the route's and does not vary by who is calling, and the
+ * call that follows is authorized as any request to that route is.
+ */
+function serves(tree, named) {
+    const names = tree.derived(NAMES, () => {
+        const names = new Map();
+        for (const { segments, verb, method, node } of tree.walk()) {
+            const tool = name(segments, verb);
+            // the first mount of a name is the one a call would reach, as `match` tries them;
+            // one that publishes nothing takes the name all the same
+            if (tool !== null && !names.has(tool))
+                names.set(tool, MCP.published(method.directives.declared(FAMILY)) ? node : null);
+        }
+        return names;
+    });
+    const node = names.get(named);
+    // a branch that has expired publishes nothing, as it answers nothing
+    return node !== undefined && node !== null && Date.now() < node.expiration;
+}
+function result(body) {
+    if (body === undefined || body === null)
+        return { content: [] };
+    return {
+        content: [{ type: 'text', text: JSON.stringify(body) }],
+        structuredContent: body
+    };
+}
+const TOOLS = 'mcp:tools';
+const NAMES = 'mcp:names';
+//# sourceMappingURL=tools.js.map